Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
c190fefa9c3d86dc1718c2ac88d9da42_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c190fefa9c3d86dc1718c2ac88d9da42_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c190fefa9c3d86dc1718c2ac88d9da42_JaffaCakes118
Size
236KB
MD5
c190fefa9c3d86dc1718c2ac88d9da42
SHA1
d28442ae1f5343f9619d32593b1a53c7f7da7bd8
SHA256
fde961c8ef47f1f99f036223a04840bcdb2e8af234214f3acb25010218fcb288
SHA512
868bad13958ee21609c0e7b97553351d31c1cc262584ac619dee4ed683cc2955e43b90709d683bfa8f3853a81e306c1c67e9307fa9e96b0597a4991c0c562724
SSDEEP
3072:/lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqs3CShpSIProXYJyr:s3kOMeaavF17EP6qyqs3CwhCYJyr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ